@run402/functions 3.12.0 → 3.14.0

package/dist/lib/jwt.d.ts

@@ -1,14 +1,36 @@
 /**
  * Minimal HS256/HS512 JWT sign + verify built directly on `node:crypto`.
  *
- * Used internally by `@run402/functions` to verify project JWTs in
- * `getUser`. Replaces a runtime dependency on the `jsonwebtoken` package
- * (and its transitive tree `jws` / `jwa` / `ecdsa-sig-formatter` /
- * `lodash.*` / `ms` / `semver` / `safe-buffer`), so this published SDK
- * has zero crypto deps beyond `node:crypto`. The Run402 Cloud gateway keeps
- * a companion implementation for its own runtime, but this package cannot
- * depend on gateway-private source.
+ * Drop-in replacement for the subset of `jsonwebtoken` this codebase used
+ * (sign / verify / decode + TokenExpiredError + JwtPayload). Replaces the
+ * `jsonwebtoken` package and its transitive tree (`jws`, `jwa`,
+ * `ecdsa-sig-formatter`, `lodash.*`, `ms`, `semver`, `safe-buffer`) — the
+ * cryptographic primitive (HMAC) comes from `node:crypto`; the rest is JWT
+ * envelope handling per RFC 7519.
+ *
+ * VENDORED, KEPT IN SYNC WITH THE GATEWAY'S `packages/gateway/src/lib/jwt.ts`.
+ * Same file lineage; this copy had drifted to a pre-keyring version (238 lines
+ * vs 344 — no `VerificationKey`, no `verifyWithKey`, no kid-aware selection),
+ * which is why no deployed function at any version could verify a keyset. That
+ * gap is what blocked project-JWT rotation entirely: pushing a new key broke
+ * old tokens, pushing the old one changed nothing, and pushing a JWKS broke
+ * every version including the newest.
+ *
+ * The symmetric HMAC algorithms plus **ES256** are implemented. ES256 exists
+ * here so the project keyring can hold a key whose VERIFICATION material is
+ * safe to hand out: with an HMAC key, verify and sign are the same capability,
+ * so any consumer able to check a signature can forge one. RS/PS remain
+ * unsupported; for OIDC JWKS verification the gateway uses `jose` directly
+ * (see services/oidc-jwks.ts).
+ *
+ * The verifier's algorithm allowlist defaults to ["HS256"] and any token
+ * claiming a different `alg` is rejected before any cryptographic work —
+ * defence against the classic "alg=none" / algorithm-confusion attacks. A key
+ * only ever verifies a token whose `alg` matches its own, so an ES256 public
+ * key can never be pressed into service as HMAC key material (the specific
+ * confusion attack that asymmetric-alongside-symmetric invites).
  */
+import { type KeyObject } from "node:crypto";
 export interface JwtPayload {
     [key: string]: unknown;
     iat?: number;
@@ -19,16 +41,59 @@ export interface JwtPayload {
     sub?: string;
     jti?: string;
 }
-export type SupportedAlgorithm = "HS256" | "HS512";
+export type SupportedAlgorithm = "HS256" | "HS512" | "ES256";
+/** True for algorithms whose verification material is not signing material. */
+export declare function isAsymmetricAlg(alg: string): alg is "ES256";
 export interface SignOptions {
     algorithm?: SupportedAlgorithm;
+    /** Seconds (number) or duration string (`"1h"`, `"15m"`, `"-1s"`). */
     expiresIn?: string | number;
+    /** Skip auto-populating `iat`. */
     noTimestamp?: boolean;
+    /**
+     * Emit a `kid` header. Omitted entirely when unset, so legacy issuance keeps
+     * producing byte-identical bare `{alg,typ}` headers.
+     */
+    kid?: string;
 }
+/**
+ * One symmetric verification key. `key` is the RAW HMAC key material: a legacy
+ * passphrase contributes `Buffer.from(passphrase, "utf8")`, a JWKS `oct` entry
+ * contributes `Buffer.from(k, "base64url")` — which are byte-identical for the
+ * same secret, so lifting a passphrase into a one-key JWKS is a no-op.
+ *
+ * `legacy: true` marks the single key eligible to verify tokens that carry NO
+ * `kid` header (what `deriveProjectKeys` emits today).
+ */
+export interface VerificationKey {
+    kid?: string;
+    /**
+     * HMAC key material for `HS*`.
+     *
+     * For `ES256` this is the SPKI DER of the PUBLIC key — never private
+     * material. It exists so the keyring's fingerprint and duplicate-material
+     * checks work identically across key types, and so nothing that digests or
+     * logs a key can reach a secret by doing so.
+     */
+    key: Buffer;
+    alg: SupportedAlgorithm;
+    legacy?: boolean;
+    /** `ES256` verification material. Absent for `HS*`. */
+    publicKey?: KeyObject;
+    /**
+     * `ES256` signing material. Present ONLY on an entry configured with a
+     * private component; its absence is what makes a key verify-only, which the
+     * keyring relies on to refuse designating it as the signing key.
+     */
+    privateKey?: KeyObject;
+}
+/** A bare passphrase (legacy) or an ordered verification keyset. */
+export type SecretOrKeys = string | ReadonlyArray<VerificationKey>;
 export interface VerifyOptions {
     algorithms?: ReadonlyArray<SupportedAlgorithm>;
     issuer?: string;
     audience?: string | string[];
+    /** Seconds of slack applied to both `exp` and `nbf` checks. */
     clockTolerance?: number;
 }
 export declare class JsonWebTokenError extends Error {
@@ -42,12 +107,42 @@ export declare class NotBeforeError extends JsonWebTokenError {
     date: Date;
     constructor(message: string, date: Date);
 }
-export declare function sign(payload: object, secret: string, options?: SignOptions): string;
-export declare function verify<T = JwtPayload>(token: string, secret: string, options?: VerifyOptions): T;
+/**
+ * Raised when a token names a `kid` no configured key provides. Declared here
+ * (after `JsonWebTokenError`) because `extends` is evaluated in source order.
+ */
+export declare class UnknownKeyIdError extends JsonWebTokenError {
+    kid: string;
+    constructor(kid: string);
+}
+export declare function sign(payload: object, secret: string | Buffer | KeyObject, options?: SignOptions): string;
+/**
+ * Verify and report WHICH key matched.
+ *
+ * Key selection (mirrors the shipped gateway policy, and is deliberately
+ * stricter than PostgREST v12.2.3, which ignores `kid` entirely):
+ *   - `kid` present and known   -> verify against THAT key alone; a signature
+ *                                  mismatch is an error, never a fallback.
+ *   - `kid` present but unknown -> reject immediately, no HMAC work.
+ *   - `kid` absent              -> try only keys marked `legacy`.
+ *
+ * A bare-string `secret` keeps the legacy single-key behavior exactly.
+ */
+export declare function verifyWithKey<T = JwtPayload>(token: string, secretOrKeys: SecretOrKeys, options?: VerifyOptions): {
+    payload: T;
+    kid?: string;
+};
+/**
+ * Verify a token, returning only the payload. Accepts a legacy passphrase or a
+ * keyset; use `verifyWithKey` when the caller needs to know which key matched
+ * (legacy-usage telemetry during a rotation).
+ */
+export declare function verify<T = JwtPayload>(token: string, secretOrKeys: SecretOrKeys, options?: VerifyOptions): T;
 export declare function decode<T = JwtPayload>(token: string): T | null;
 declare const jwt: {
     sign: typeof sign;
     verify: typeof verify;
+    verifyWithKey: typeof verifyWithKey;
     decode: typeof decode;
 };
 export default jwt;

package/dist/lib/jwt.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"jwt.d.ts","sourceRoot":"","sources":["../../src/lib/jwt.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAIH,MAAM,WAAW,UAAU;IACzB,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC;IACvB,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,GAAG,CAAC,EAAE,MAAM,GAAG,MAAM,EAAE,CAAC;IACxB,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,GAAG,CAAC,EAAE,MAAM,CAAC;CACd;AAED,MAAM,MAAM,kBAAkB,GAAG,OAAO,GAAG,OAAO,CAAC;AAEnD,MAAM,WAAW,WAAW;IAC1B,SAAS,CAAC,EAAE,kBAAkB,CAAC;IAC/B,SAAS,CAAC,EAAE,MAAM,GAAG,MAAM,CAAC;IAC5B,WAAW,CAAC,EAAE,OAAO,CAAC;CACvB;AAED,MAAM,WAAW,aAAa;IAC5B,UAAU,CAAC,EAAE,aAAa,CAAC,kBAAkB,CAAC,CAAC;IAC/C,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,QAAQ,CAAC,EAAE,MAAM,GAAG,MAAM,EAAE,CAAC;IAC7B,cAAc,CAAC,EAAE,MAAM,CAAC;CACzB;AAED,qBAAa,iBAAkB,SAAQ,KAAK;gBAC9B,OAAO,EAAE,MAAM;CAI5B;AAED,qBAAa,iBAAkB,SAAQ,iBAAiB;IACtD,SAAS,EAAE,IAAI,CAAC;gBACJ,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,IAAI;CAK7C;AAED,qBAAa,cAAe,SAAQ,iBAAiB;IACnD,IAAI,EAAE,IAAI,CAAC;gBACC,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI;CAKxC;AAqCD,wBAAgB,IAAI,CAClB,OAAO,EAAE,MAAM,EACf,MAAM,EAAE,MAAM,EACd,OAAO,CAAC,EAAE,WAAW,GACpB,MAAM,CAmCR;AAED,wBAAgB,MAAM,CAAC,CAAC,GAAG,UAAU,EACnC,KAAK,EAAE,MAAM,EACb,MAAM,EAAE,MAAM,EACd,OAAO,CAAC,EAAE,aAAa,GACtB,CAAC,CA4EH;AAED,wBAAgB,MAAM,CAAC,CAAC,GAAG,UAAU,EAAE,KAAK,EAAE,MAAM,GAAG,CAAC,GAAG,IAAI,CAW9D;AAED,QAAA,MAAM,GAAG;;;;CAA2B,CAAC;AACrC,eAAe,GAAG,CAAC"}
+{"version":3,"file":"jwt.d.ts","sourceRoot":"","sources":["../../src/lib/jwt.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA+BG;AAEH,OAAO,EAAyD,KAAK,SAAS,EAAE,MAAM,aAAa,CAAC;AAEpG,MAAM,WAAW,UAAU;IACzB,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC;IACvB,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,GAAG,CAAC,EAAE,MAAM,GAAG,MAAM,EAAE,CAAC;IACxB,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,GAAG,CAAC,EAAE,MAAM,CAAC;CACd;AAED,MAAM,MAAM,kBAAkB,GAAG,OAAO,GAAG,OAAO,GAAG,OAAO,CAAC;AAE7D,+EAA+E;AAC/E,wBAAgB,eAAe,CAAC,GAAG,EAAE,MAAM,GAAG,GAAG,IAAI,OAAO,CAE3D;AAED,MAAM,WAAW,WAAW;IAC1B,SAAS,CAAC,EAAE,kBAAkB,CAAC;IAC/B,sEAAsE;IACtE,SAAS,CAAC,EAAE,MAAM,GAAG,MAAM,CAAC;IAC5B,kCAAkC;IAClC,WAAW,CAAC,EAAE,OAAO,CAAC;IACtB;;;OAGG;IACH,GAAG,CAAC,EAAE,MAAM,CAAC;CACd;AAED;;;;;;;;GAQG;AACH,MAAM,WAAW,eAAe;IAC9B,GAAG,CAAC,EAAE,MAAM,CAAC;IACb;;;;;;;OAOG;IACH,GAAG,EAAE,MAAM,CAAC;IACZ,GAAG,EAAE,kBAAkB,CAAC;IACxB,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB,uDAAuD;IACvD,SAAS,CAAC,EAAE,SAAS,CAAC;IACtB;;;;OAIG;IACH,UAAU,CAAC,EAAE,SAAS,CAAC;CACxB;AAED,oEAAoE;AACpE,MAAM,MAAM,YAAY,GAAG,MAAM,GAAG,aAAa,CAAC,eAAe,CAAC,CAAC;AAEnE,MAAM,WAAW,aAAa;IAC5B,UAAU,CAAC,EAAE,aAAa,CAAC,kBAAkB,CAAC,CAAC;IAC/C,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,QAAQ,CAAC,EAAE,MAAM,GAAG,MAAM,EAAE,CAAC;IAC7B,+DAA+D;IAC/D,cAAc,CAAC,EAAE,MAAM,CAAC;CACzB;AAED,qBAAa,iBAAkB,SAAQ,KAAK;gBAC9B,OAAO,EAAE,MAAM;CAI5B;AAED,qBAAa,iBAAkB,SAAQ,iBAAiB;IACtD,SAAS,EAAE,IAAI,CAAC;gBACJ,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,IAAI;CAK7C;AAED,qBAAa,cAAe,SAAQ,iBAAiB;IACnD,IAAI,EAAE,IAAI,CAAC;gBACC,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI;CAKxC;AAED;;;GAGG;AACH,qBAAa,iBAAkB,SAAQ,iBAAiB;IACtD,GAAG,EAAE,MAAM,CAAC;gBACA,GAAG,EAAE,MAAM;CAKxB;AA0CD,wBAAgB,IAAI,CAClB,OAAO,EAAE,MAAM,EAOf,MAAM,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS,EACnC,OAAO,CAAC,EAAE,WAAW,GACpB,MAAM,CAuDR;AAED;;;;;;;;;;;GAWG;AACH,wBAAgB,aAAa,CAAC,CAAC,GAAG,UAAU,EAC1C,KAAK,EAAE,MAAM,EACb,YAAY,EAAE,YAAY,EAC1B,OAAO,CAAC,EAAE,aAAa,GACtB;IAAE,OAAO,EAAE,CAAC,CAAC;IAAC,GAAG,CAAC,EAAE,MAAM,CAAA;CAAE,CAoH9B;AAED;;;;GAIG;AACH,wBAAgB,MAAM,CAAC,CAAC,GAAG,UAAU,EACnC,KAAK,EAAE,MAAM,EACb,YAAY,EAAE,YAAY,EAC1B,OAAO,CAAC,EAAE,aAAa,GACtB,CAAC,CAEH;AAED,wBAAgB,MAAM,CAAC,CAAC,GAAG,UAAU,EAAE,KAAK,EAAE,MAAM,GAAG,CAAC,GAAG,IAAI,CAW9D;AAED,QAAA,MAAM,GAAG;;;;;CAA0C,CAAC;AACpD,eAAe,GAAG,CAAC"}

package/dist/lib/jwt.js

@@ -1,15 +1,40 @@
 /**
  * Minimal HS256/HS512 JWT sign + verify built directly on `node:crypto`.
  *
- * Used internally by `@run402/functions` to verify project JWTs in
- * `getUser`. Replaces a runtime dependency on the `jsonwebtoken` package
- * (and its transitive tree `jws` / `jwa` / `ecdsa-sig-formatter` /
- * `lodash.*` / `ms` / `semver` / `safe-buffer`), so this published SDK
- * has zero crypto deps beyond `node:crypto`. The Run402 Cloud gateway keeps
- * a companion implementation for its own runtime, but this package cannot
- * depend on gateway-private source.
+ * Drop-in replacement for the subset of `jsonwebtoken` this codebase used
+ * (sign / verify / decode + TokenExpiredError + JwtPayload). Replaces the
+ * `jsonwebtoken` package and its transitive tree (`jws`, `jwa`,
+ * `ecdsa-sig-formatter`, `lodash.*`, `ms`, `semver`, `safe-buffer`) — the
+ * cryptographic primitive (HMAC) comes from `node:crypto`; the rest is JWT
+ * envelope handling per RFC 7519.
+ *
+ * VENDORED, KEPT IN SYNC WITH THE GATEWAY'S `packages/gateway/src/lib/jwt.ts`.
+ * Same file lineage; this copy had drifted to a pre-keyring version (238 lines
+ * vs 344 — no `VerificationKey`, no `verifyWithKey`, no kid-aware selection),
+ * which is why no deployed function at any version could verify a keyset. That
+ * gap is what blocked project-JWT rotation entirely: pushing a new key broke
+ * old tokens, pushing the old one changed nothing, and pushing a JWKS broke
+ * every version including the newest.
+ *
+ * The symmetric HMAC algorithms plus **ES256** are implemented. ES256 exists
+ * here so the project keyring can hold a key whose VERIFICATION material is
+ * safe to hand out: with an HMAC key, verify and sign are the same capability,
+ * so any consumer able to check a signature can forge one. RS/PS remain
+ * unsupported; for OIDC JWKS verification the gateway uses `jose` directly
+ * (see services/oidc-jwks.ts).
+ *
+ * The verifier's algorithm allowlist defaults to ["HS256"] and any token
+ * claiming a different `alg` is rejected before any cryptographic work —
+ * defence against the classic "alg=none" / algorithm-confusion attacks. A key
+ * only ever verifies a token whose `alg` matches its own, so an ES256 public
+ * key can never be pressed into service as HMAC key material (the specific
+ * confusion attack that asymmetric-alongside-symmetric invites).
  */
-import { createHmac, timingSafeEqual } from "node:crypto";
+import { createHmac, createSign, createVerify, timingSafeEqual } from "node:crypto";
+/** True for algorithms whose verification material is not signing material. */
+export function isAsymmetricAlg(alg) {
+    return alg === "ES256";
+}
 export class JsonWebTokenError extends Error {
     constructor(message) {
         super(message);
@@ -32,6 +57,18 @@ export class NotBeforeError extends JsonWebTokenError {
         this.date = date;
     }
 }
+/**
+ * Raised when a token names a `kid` no configured key provides. Declared here
+ * (after `JsonWebTokenError`) because `extends` is evaluated in source order.
+ */
+export class UnknownKeyIdError extends JsonWebTokenError {
+    kid;
+    constructor(kid) {
+        super("unknown key id");
+        this.name = "UnknownKeyIdError";
+        this.kid = kid;
+    }
+}
 function b64urlEncode(input) {
     const buf = typeof input === "string" ? Buffer.from(input, "utf8") : input;
     return buf.toString("base64").replace(/\+/g, "-").replace(/\//g, "_").replace(/=+$/, "");
@@ -68,14 +105,38 @@ function parseDurationSeconds(input) {
     return Math.floor(n);
 }
 function hmacForAlg(alg) {
-    return alg === "HS256" ? "sha256" : "sha512";
+    // Explicit rather than `=== "HS256" ? sha256 : sha512`: with ES256 in the
+    // union that fallback would silently HMAC an asymmetric key under sha512.
+    // Both call sites guard already; this makes the guard non-load-bearing.
+    if (alg === "HS256")
+        return "sha256";
+    if (alg === "HS512")
+        return "sha512";
+    throw new JsonWebTokenError(`${alg} is not an HMAC algorithm`);
 }
-export function sign(payload, secret, options) {
+export function sign(payload, 
+// Accepts RAW key bytes as well as a passphrase. Callers that resolve a key
+// through the keyring pass a Buffer, so they sign with the DECODED key rather
+// than whatever string `JWT_SECRET` happens to hold — under a JWKS that string
+// is the JSON document, and signing with it produces tokens nothing verifies.
+// For ES256 the caller passes the private `KeyObject`; a Buffer is rejected,
+// since raw bytes cannot be an EC private key here.
+secret, options) {
     const alg = options?.algorithm ?? "HS256";
-    if (alg !== "HS256" && alg !== "HS512") {
+    if (alg !== "HS256" && alg !== "HS512" && alg !== "ES256") {
         throw new JsonWebTokenError(`Unsupported algorithm: ${alg}`);
     }
-    if (typeof secret !== "string" || secret.length === 0) {
+    const isKeyObject = typeof secret === "object" && secret !== null && !Buffer.isBuffer(secret);
+    if (alg === "ES256") {
+        if (!isKeyObject) {
+            throw new JsonWebTokenError("ES256 requires a private KeyObject");
+        }
+    }
+    else if (isKeyObject) {
+        throw new JsonWebTokenError(`${alg} requires raw key material, not a KeyObject`);
+    }
+    const isBuffer = Buffer.isBuffer(secret);
+    if (!isKeyObject && ((!isBuffer && typeof secret !== "string") || secret.length === 0)) {
         throw new JsonWebTokenError("secretOrPrivateKey must be provided");
     }
     if (payload === null || typeof payload !== "object" || Array.isArray(payload)) {
@@ -94,21 +155,48 @@ export function sign(payload, secret, options) {
         const iatRef = typeof claims.iat === "number" ? claims.iat : Math.floor(Date.now() / 1000);
         claims.exp = iatRef + offset;
     }
-    const header = { alg, typ: "JWT" };
+    // `kid` is omitted entirely when unset so legacy issuance keeps producing
+    // byte-identical bare `{alg,typ}` headers.
+    const header = options?.kid === undefined
+        ? { alg, typ: "JWT" }
+        : { alg, typ: "JWT", kid: options.kid };
     const headerB64 = b64urlEncode(JSON.stringify(header));
     const payloadB64 = b64urlEncode(JSON.stringify(claims));
-    const sig = createHmac(hmacForAlg(alg), secret)
-        .update(`${headerB64}.${payloadB64}`)
-        .digest();
-    return `${headerB64}.${payloadB64}.${b64urlEncode(sig)}`;
+    const signingInput = `${headerB64}.${payloadB64}`;
+    const sig = alg === "ES256"
+        // JWS requires the raw R||S pair, NOT the DER encoding node emits by
+        // default. Getting this wrong produces a signature every verifier rejects.
+        ? createSign("sha256")
+            .update(signingInput)
+            .sign({ key: secret, dsaEncoding: "ieee-p1363" })
+        : createHmac(hmacForAlg(alg), secret)
+            .update(signingInput)
+            .digest();
+    return `${signingInput}.${b64urlEncode(sig)}`;
 }
-export function verify(token, secret, options) {
+/**
+ * Verify and report WHICH key matched.
+ *
+ * Key selection (mirrors the shipped gateway policy, and is deliberately
+ * stricter than PostgREST v12.2.3, which ignores `kid` entirely):
+ *   - `kid` present and known   -> verify against THAT key alone; a signature
+ *                                  mismatch is an error, never a fallback.
+ *   - `kid` present but unknown -> reject immediately, no HMAC work.
+ *   - `kid` absent              -> try only keys marked `legacy`.
+ *
+ * A bare-string `secret` keeps the legacy single-key behavior exactly.
+ */
+export function verifyWithKey(token, secretOrKeys, options) {
     if (typeof token !== "string" || token.length === 0) {
         throw new JsonWebTokenError("jwt must be provided");
     }
-    if (typeof secret !== "string" || secret.length === 0) {
+    const keys = typeof secretOrKeys === "string"
+        ? (secretOrKeys.length === 0
+            ? (() => { throw new JsonWebTokenError("secret must be provided"); })()
+            : [{ key: Buffer.from(secretOrKeys, "utf8"), alg: "HS256", legacy: true }])
+        : secretOrKeys;
+    if (keys.length === 0)
         throw new JsonWebTokenError("secret must be provided");
-    }
     const parts = token.split(".");
     if (parts.length !== 3)
         throw new JsonWebTokenError("jwt malformed");
@@ -124,12 +212,25 @@ export function verify(token, secret, options) {
     if (typeof header.alg !== "string" || !allowed.includes(header.alg)) {
         throw new JsonWebTokenError("invalid algorithm");
     }
-    if (header.alg !== "HS256" && header.alg !== "HS512") {
+    if (header.alg !== "HS256" && header.alg !== "HS512" && header.alg !== "ES256") {
         throw new JsonWebTokenError("invalid algorithm");
     }
-    const expected = createHmac(hmacForAlg(header.alg), secret)
-        .update(`${headerB64}.${payloadB64}`)
-        .digest();
+    const alg = header.alg;
+    // Select the candidate set BEFORE doing any HMAC work.
+    let candidates;
+    if (typeof header.kid === "string") {
+        const named = keys.filter((k) => k.kid === header.kid);
+        if (named.length === 0)
+            throw new UnknownKeyIdError(header.kid);
+        candidates = named;
+    }
+    else {
+        // A bare string secret is inherently the legacy key; an explicit keyset
+        // must mark exactly which key may verify kid-less tokens.
+        candidates = keys.filter((k) => k.legacy === true);
+        if (candidates.length === 0)
+            throw new JsonWebTokenError("invalid key id");
+    }
     let got;
     try {
         got = b64urlDecodeToBuffer(sigB64);
@@ -137,9 +238,35 @@ export function verify(token, secret, options) {
     catch {
         throw new JsonWebTokenError("invalid signature");
     }
-    if (got.length !== expected.length || !timingSafeEqual(got, expected)) {
-        throw new JsonWebTokenError("invalid signature");
+    let matched;
+    for (const candidate of candidates) {
+        // A key only verifies its OWN algorithm. This is what stops an ES256
+        // public key from being used as HMAC material (algorithm confusion) now
+        // that both kinds can sit in one keyset.
+        if (candidate.alg !== alg)
+            continue;
+        if (alg === "ES256") {
+            if (!candidate.publicKey)
+                continue;
+            const ok = createVerify("sha256")
+                .update(`${headerB64}.${payloadB64}`)
+                .verify({ key: candidate.publicKey, dsaEncoding: "ieee-p1363" }, got);
+            if (ok) {
+                matched = candidate;
+                break;
+            }
+            continue;
+        }
+        const expected = createHmac(hmacForAlg(alg), candidate.key)
+            .update(`${headerB64}.${payloadB64}`)
+            .digest();
+        if (got.length === expected.length && timingSafeEqual(got, expected)) {
+            matched = candidate;
+            break;
+        }
     }
+    if (!matched)
+        throw new JsonWebTokenError("invalid signature");
     let payload;
     try {
         payload = JSON.parse(b64urlDecodeToBuffer(payloadB64).toString("utf8"));
@@ -172,7 +299,15 @@ export function verify(token, secret, options) {
             throw new JsonWebTokenError("jwt audience invalid");
         }
     }
-    return payload;
+    return { payload: payload, kid: matched.kid };
+}
+/**
+ * Verify a token, returning only the payload. Accepts a legacy passphrase or a
+ * keyset; use `verifyWithKey` when the caller needs to know which key matched
+ * (legacy-usage telemetry during a rotation).
+ */
+export function verify(token, secretOrKeys, options) {
+    return verifyWithKey(token, secretOrKeys, options).payload;
 }
 export function decode(token) {
     if (typeof token !== "string")
@@ -190,6 +325,6 @@ export function decode(token) {
         return null;
     }
 }
-const jwt = { sign, verify, decode };
+const jwt = { sign, verify, verifyWithKey, decode };
 export default jwt;
 //# sourceMappingURL=jwt.js.map

package/dist/lib/jwt.js.map

@@ -1 +1 @@
-{"version":3,"file":"jwt.js","sourceRoot":"","sources":["../../src/lib/jwt.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAEH,OAAO,EAAE,UAAU,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC;AA4B1D,MAAM,OAAO,iBAAkB,SAAQ,KAAK;IAC1C,YAAY,OAAe;QACzB,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,mBAAmB,CAAC;IAClC,CAAC;CACF;AAED,MAAM,OAAO,iBAAkB,SAAQ,iBAAiB;IACtD,SAAS,CAAO;IAChB,YAAY,OAAe,EAAE,SAAe;QAC1C,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,mBAAmB,CAAC;QAChC,IAAI,CAAC,SAAS,GAAG,SAAS,CAAC;IAC7B,CAAC;CACF;AAED,MAAM,OAAO,cAAe,SAAQ,iBAAiB;IACnD,IAAI,CAAO;IACX,YAAY,OAAe,EAAE,IAAU;QACrC,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,gBAAgB,CAAC;QAC7B,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC;IACnB,CAAC;CACF;AAED,SAAS,YAAY,CAAC,KAAsB;IAC1C,MAAM,GAAG,GAAG,OAAO,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC;IAC3E,OAAO,GAAG,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;AAC3F,CAAC;AAED,SAAS,oBAAoB,CAAC,KAAa;IACzC,IAAI,CAAC,kBAAkB,CAAC,IAAI,CAAC,KAAK,CAAC;QAAE,MAAM,IAAI,iBAAiB,CAAC,eAAe,CAAC,CAAC;IAClF,MAAM,IAAI,GAAG,KAAK,CAAC,OAAO,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;IACzD,MAAM,GAAG,GAAG,IAAI,CAAC,MAAM,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC;IAC3E,OAAO,MAAM,CAAC,IAAI,CAAC,IAAI,GAAG,GAAG,EAAE,QAAQ,CAAC,CAAC;AAC3C,CAAC;AAED,MAAM,WAAW,GAAG,6GAA6G,CAAC;AAElI,SAAS,oBAAoB,CAAC,KAAsB;IAClD,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QAC9B,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC;YAAE,MAAM,IAAI,SAAS,CAAC,sBAAsB,KAAK,EAAE,CAAC,CAAC;QAChF,OAAO,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;IAC3B,CAAC;IACD,MAAM,CAAC,GAAG,WAAW,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC;IACzC,IAAI,CAAC,CAAC;QAAE,MAAM,IAAI,SAAS,CAAC,+BAA+B,KAAK,EAAE,CAAC,CAAC;IACpE,MAAM,CAAC,GAAG,UAAU,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IAC3B,MAAM,IAAI,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,GAAG,CAAC,CAAC,WAAW,EAAE,CAAC;IACzC,IAAI,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC;QAAE,OAAO,IAAI,CAAC,KAAK,CAAC,CAAC,GAAG,UAAU,CAAC,CAAC;IAC5D,IAAI,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC;QAAE,OAAO,IAAI,CAAC,KAAK,CAAC,CAAC,GAAG,OAAO,CAAC,CAAC;IACzD,IAAI,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC;QAAE,OAAO,IAAI,CAAC,KAAK,CAAC,CAAC,GAAG,MAAM,CAAC,CAAC;IACxD,IAAI,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC;QAAE,OAAO,IAAI,CAAC,KAAK,CAAC,CAAC,GAAG,KAAK,CAAC,CAAC;IACvD,IAAI,IAAI,KAAK,GAAG,IAAI,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC,KAAK,CAAC,CAAC,GAAG,EAAE,CAAC,CAAC;IACtE,OAAO,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;AACvB,CAAC;AAED,SAAS,UAAU,CAAC,GAAuB;IACzC,OAAO,GAAG,KAAK,OAAO,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC;AAC/C,CAAC;AAED,MAAM,UAAU,IAAI,CAClB,OAAe,EACf,MAAc,EACd,OAAqB;IAErB,MAAM,GAAG,GAAuB,OAAO,EAAE,SAAS,IAAI,OAAO,CAAC;IAC9D,IAAI,GAAG,KAAK,OAAO,IAAI,GAAG,KAAK,OAAO,EAAE,CAAC;QACvC,MAAM,IAAI,iBAAiB,CAAC,0BAA0B,GAAG,EAAE,CAAC,CAAC;IAC/D,CAAC;IACD,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACtD,MAAM,IAAI,iBAAiB,CAAC,qCAAqC,CAAC,CAAC;IACrE,CAAC;IACD,IAAI,OAAO,KAAK,IAAI,IAAI,OAAO,OAAO,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC;QAC9E,MAAM,IAAI,iBAAiB,CAAC,gCAAgC,CAAC,CAAC;IAChE,CAAC;IAED,MAAM,MAAM,GAA4B,EAAE,GAAI,OAAmC,EAAE,CAAC;IACpF,MAAM,WAAW,GAAG,OAAO,EAAE,WAAW,IAAI,KAAK,CAAC;IAClD,IAAI,CAAC,WAAW,IAAI,MAAM,CAAC,GAAG,KAAK,SAAS,EAAE,CAAC;QAC7C,MAAM,CAAC,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC;IAC7C,CAAC;IACD,IAAI,OAAO,EAAE,SAAS,KAAK,SAAS,EAAE,CAAC;QACrC,IAAI,MAAM,CAAC,GAAG,KAAK,SAAS,EAAE,CAAC;YAC7B,MAAM,IAAI,iBAAiB,CACzB,sEAAsE,CACvE,CAAC;QACJ,CAAC;QACD,MAAM,MAAM,GAAG,oBAAoB,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;QACvD,MAAM,MAAM,GAAG,OAAO,MAAM,CAAC,GAAG,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC;QAC3F,MAAM,CAAC,GAAG,GAAG,MAAM,GAAG,MAAM,CAAC;IAC/B,CAAC;IAED,MAAM,MAAM,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,KAAK,EAAE,CAAC;IACnC,MAAM,SAAS,GAAG,YAAY,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC;IACvD,MAAM,UAAU,GAAG,YAAY,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC;IACxD,MAAM,GAAG,GAAG,UAAU,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,MAAM,CAAC;SAC5C,MAAM,CAAC,GAAG,SAAS,IAAI,UAAU,EAAE,CAAC;SACpC,MAAM,EAAE,CAAC;IACZ,OAAO,GAAG,SAAS,IAAI,UAAU,IAAI,YAAY,CAAC,GAAG,CAAC,EAAE,CAAC;AAC3D,CAAC;AAED,MAAM,UAAU,MAAM,CACpB,KAAa,EACb,MAAc,EACd,OAAuB;IAEvB,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACpD,MAAM,IAAI,iBAAiB,CAAC,sBAAsB,CAAC,CAAC;IACtD,CAAC;IACD,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACtD,MAAM,IAAI,iBAAiB,CAAC,yBAAyB,CAAC,CAAC;IACzD,CAAC;IACD,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAC/B,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;QAAE,MAAM,IAAI,iBAAiB,CAAC,eAAe,CAAC,CAAC;IACrE,MAAM,CAAC,SAAS,EAAE,UAAU,EAAE,MAAM,CAAC,GAAG,KAAK,CAAC;IAE9C,IAAI,MAAwC,CAAC;IAC7C,IAAI,CAAC;QACH,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,oBAAoB,CAAC,SAAS,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAGnE,CAAC;IACJ,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,iBAAiB,CAAC,eAAe,CAAC,CAAC;IAC/C,CAAC;IAED,MAAM,OAAO,GAAG,CAAC,OAAO,EAAE,UAAU,IAAI,CAAC,OAAO,CAAC,CAA0B,CAAC;IAC5E,IAAI,OAAO,MAAM,CAAC,GAAG,KAAK,QAAQ,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC;QACpE,MAAM,IAAI,iBAAiB,CAAC,mBAAmB,CAAC,CAAC;IACnD,CAAC;IACD,IAAI,MAAM,CAAC,GAAG,KAAK,OAAO,IAAI,MAAM,CAAC,GAAG,KAAK,OAAO,EAAE,CAAC;QACrD,MAAM,IAAI,iBAAiB,CAAC,mBAAmB,CAAC,CAAC;IACnD,CAAC;IAED,MAAM,QAAQ,GAAG,UAAU,CAAC,UAAU,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,MAAM,CAAC;SACxD,MAAM,CAAC,GAAG,SAAS,IAAI,UAAU,EAAE,CAAC;SACpC,MAAM,EAAE,CAAC;IACZ,IAAI,GAAW,CAAC;IAChB,IAAI,CAAC;QACH,GAAG,GAAG,oBAAoB,CAAC,MAAM,CAAC,CAAC;IACrC,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,iBAAiB,CAAC,mBAAmB,CAAC,CAAC;IACnD,CAAC;IACD,IAAI,GAAG,CAAC,MAAM,KAAK,QAAQ,CAAC,MAAM,IAAI,CAAC,eAAe,CAAC,GAAG,EAAE,QAAQ,CAAC,EAAE,CAAC;QACtE,MAAM,IAAI,iBAAiB,CAAC,mBAAmB,CAAC,CAAC;IACnD,CAAC;IAED,IAAI,OAAmB,CAAC;IACxB,IAAI,CAAC;QACH,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,oBAAoB,CAAC,UAAU,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAe,CAAC;IACxF,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,iBAAiB,CAAC,eAAe,CAAC,CAAC;IAC/C,CAAC;IACD,IAAI,OAAO,KAAK,IAAI,IAAI,OAAO,OAAO,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC;QAC9E,MAAM,IAAI,iBAAiB,CAAC,eAAe,CAAC,CAAC;IAC/C,CAAC;IAED,MAAM,cAAc,GAAG,OAAO,EAAE,cAAc,IAAI,CAAC,CAAC;IACpD,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC;IAC1C,IAAI,OAAO,OAAO,CAAC,GAAG,KAAK,QAAQ,IAAI,OAAO,CAAC,GAAG,GAAG,cAAc,GAAG,GAAG,EAAE,CAAC;QAC1E,MAAM,IAAI,iBAAiB,CAAC,aAAa,EAAE,IAAI,IAAI,CAAC,OAAO,CAAC,GAAG,GAAG,IAAI,CAAC,CAAC,CAAC;IAC3E,CAAC;IACD,IAAI,OAAO,OAAO,CAAC,GAAG,KAAK,QAAQ,IAAI,OAAO,CAAC,GAAG,GAAG,cAAc,GAAG,GAAG,EAAE,CAAC;QAC1E,MAAM,IAAI,cAAc,CAAC,gBAAgB,EAAE,IAAI,IAAI,CAAC,OAAO,CAAC,GAAG,GAAG,IAAI,CAAC,CAAC,CAAC;IAC3E,CAAC;IACD,IAAI,OAAO,EAAE,MAAM,KAAK,SAAS,IAAI,OAAO,CAAC,GAAG,KAAK,OAAO,CAAC,MAAM,EAAE,CAAC;QACpE,MAAM,IAAI,iBAAiB,CAAC,iCAAiC,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC;IACjF,CAAC;IACD,IAAI,OAAO,EAAE,QAAQ,KAAK,SAAS,EAAE,CAAC;QACpC,MAAM,OAAO,GAAG,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;QACxF,MAAM,OAAO,GAAG,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC;YACxC,CAAC,CAAC,OAAO,CAAC,GAAG;YACb,CAAC,CAAC,OAAO,CAAC,GAAG,KAAK,SAAS;gBACzB,CAAC,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC;gBACf,CAAC,CAAC,EAAE,CAAC;QACT,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;YAC9C,MAAM,IAAI,iBAAiB,CAAC,sBAAsB,CAAC,CAAC;QACtD,CAAC;IACH,CAAC;IAED,OAAO,OAAY,CAAC;AACtB,CAAC;AAED,MAAM,UAAU,MAAM,CAAiB,KAAa;IAClD,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,IAAI,CAAC;IAC3C,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAC/B,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IACpC,IAAI,CAAC;QACH,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,oBAAoB,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAY,CAAC;QACvF,IAAI,OAAO,KAAK,IAAI,IAAI,OAAO,OAAO,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC;YAAE,OAAO,IAAI,CAAC;QAC3F,OAAO,OAAY,CAAC;IACtB,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED,MAAM,GAAG,GAAG,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC;AACrC,eAAe,GAAG,CAAC"}
+{"version":3,"file":"jwt.js","sourceRoot":"","sources":["../../src/lib/jwt.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA+BG;AAEH,OAAO,EAAE,UAAU,EAAE,UAAU,EAAE,YAAY,EAAE,eAAe,EAAkB,MAAM,aAAa,CAAC;AAepG,+EAA+E;AAC/E,MAAM,UAAU,eAAe,CAAC,GAAW;IACzC,OAAO,GAAG,KAAK,OAAO,CAAC;AACzB,CAAC;AA0DD,MAAM,OAAO,iBAAkB,SAAQ,KAAK;IAC1C,YAAY,OAAe;QACzB,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,mBAAmB,CAAC;IAClC,CAAC;CACF;AAED,MAAM,OAAO,iBAAkB,SAAQ,iBAAiB;IACtD,SAAS,CAAO;IAChB,YAAY,OAAe,EAAE,SAAe;QAC1C,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,mBAAmB,CAAC;QAChC,IAAI,CAAC,SAAS,GAAG,SAAS,CAAC;IAC7B,CAAC;CACF;AAED,MAAM,OAAO,cAAe,SAAQ,iBAAiB;IACnD,IAAI,CAAO;IACX,YAAY,OAAe,EAAE,IAAU;QACrC,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,gBAAgB,CAAC;QAC7B,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC;IACnB,CAAC;CACF;AAED;;;GAGG;AACH,MAAM,OAAO,iBAAkB,SAAQ,iBAAiB;IACtD,GAAG,CAAS;IACZ,YAAY,GAAW;QACrB,KAAK,CAAC,gBAAgB,CAAC,CAAC;QACxB,IAAI,CAAC,IAAI,GAAG,mBAAmB,CAAC;QAChC,IAAI,CAAC,GAAG,GAAG,GAAG,CAAC;IACjB,CAAC;CACF;AAED,SAAS,YAAY,CAAC,KAAsB;IAC1C,MAAM,GAAG,GAAG,OAAO,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC;IAC3E,OAAO,GAAG,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;AAC3F,CAAC;AAED,SAAS,oBAAoB,CAAC,KAAa;IACzC,IAAI,CAAC,kBAAkB,CAAC,IAAI,CAAC,KAAK,CAAC;QAAE,MAAM,IAAI,iBAAiB,CAAC,eAAe,CAAC,CAAC;IAClF,MAAM,IAAI,GAAG,KAAK,CAAC,OAAO,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;IACzD,MAAM,GAAG,GAAG,IAAI,CAAC,MAAM,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC;IAC3E,OAAO,MAAM,CAAC,IAAI,CAAC,IAAI,GAAG,GAAG,EAAE,QAAQ,CAAC,CAAC;AAC3C,CAAC;AAED,MAAM,WAAW,GAAG,6GAA6G,CAAC;AAElI,SAAS,oBAAoB,CAAC,KAAsB;IAClD,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QAC9B,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC;YAAE,MAAM,IAAI,SAAS,CAAC,sBAAsB,KAAK,EAAE,CAAC,CAAC;QAChF,OAAO,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;IAC3B,CAAC;IACD,MAAM,CAAC,GAAG,WAAW,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC;IACzC,IAAI,CAAC,CAAC;QAAE,MAAM,IAAI,SAAS,CAAC,+BAA+B,KAAK,EAAE,CAAC,CAAC;IACpE,MAAM,CAAC,GAAG,UAAU,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IAC3B,MAAM,IAAI,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,GAAG,CAAC,CAAC,WAAW,EAAE,CAAC;IACzC,IAAI,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC;QAAE,OAAO,IAAI,CAAC,KAAK,CAAC,CAAC,GAAG,UAAU,CAAC,CAAC;IAC5D,IAAI,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC;QAAE,OAAO,IAAI,CAAC,KAAK,CAAC,CAAC,GAAG,OAAO,CAAC,CAAC;IACzD,IAAI,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC;QAAE,OAAO,IAAI,CAAC,KAAK,CAAC,CAAC,GAAG,MAAM,CAAC,CAAC;IACxD,IAAI,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC;QAAE,OAAO,IAAI,CAAC,KAAK,CAAC,CAAC,GAAG,KAAK,CAAC,CAAC;IACvD,IAAI,IAAI,KAAK,GAAG,IAAI,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC,KAAK,CAAC,CAAC,GAAG,EAAE,CAAC,CAAC;IACtE,OAAO,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;AACvB,CAAC;AAED,SAAS,UAAU,CAAC,GAAuB;IACzC,0EAA0E;IAC1E,0EAA0E;IAC1E,wEAAwE;IACxE,IAAI,GAAG,KAAK,OAAO;QAAE,OAAO,QAAQ,CAAC;IACrC,IAAI,GAAG,KAAK,OAAO;QAAE,OAAO,QAAQ,CAAC;IACrC,MAAM,IAAI,iBAAiB,CAAC,GAAG,GAAG,2BAA2B,CAAC,CAAC;AACjE,CAAC;AAED,MAAM,UAAU,IAAI,CAClB,OAAe;AACf,4EAA4E;AAC5E,8EAA8E;AAC9E,+EAA+E;AAC/E,8EAA8E;AAC9E,6EAA6E;AAC7E,oDAAoD;AACpD,MAAmC,EACnC,OAAqB;IAErB,MAAM,GAAG,GAAuB,OAAO,EAAE,SAAS,IAAI,OAAO,CAAC;IAC9D,IAAI,GAAG,KAAK,OAAO,IAAI,GAAG,KAAK,OAAO,IAAI,GAAG,KAAK,OAAO,EAAE,CAAC;QAC1D,MAAM,IAAI,iBAAiB,CAAC,0BAA0B,GAAG,EAAE,CAAC,CAAC;IAC/D,CAAC;IACD,MAAM,WAAW,GAAG,OAAO,MAAM,KAAK,QAAQ,IAAI,MAAM,KAAK,IAAI,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;IAC9F,IAAI,GAAG,KAAK,OAAO,EAAE,CAAC;QACpB,IAAI,CAAC,WAAW,EAAE,CAAC;YACjB,MAAM,IAAI,iBAAiB,CAAC,oCAAoC,CAAC,CAAC;QACpE,CAAC;IACH,CAAC;SAAM,IAAI,WAAW,EAAE,CAAC;QACvB,MAAM,IAAI,iBAAiB,CAAC,GAAG,GAAG,6CAA6C,CAAC,CAAC;IACnF,CAAC;IACD,MAAM,QAAQ,GAAG,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;IACzC,IAAI,CAAC,WAAW,IAAI,CAAC,CAAC,CAAC,QAAQ,IAAI,OAAO,MAAM,KAAK,QAAQ,CAAC,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC,CAAC,EAAE,CAAC;QACvF,MAAM,IAAI,iBAAiB,CAAC,qCAAqC,CAAC,CAAC;IACrE,CAAC;IACD,IAAI,OAAO,KAAK,IAAI,IAAI,OAAO,OAAO,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC;QAC9E,MAAM,IAAI,iBAAiB,CAAC,gCAAgC,CAAC,CAAC;IAChE,CAAC;IAED,MAAM,MAAM,GAA4B,EAAE,GAAI,OAAmC,EAAE,CAAC;IACpF,MAAM,WAAW,GAAG,OAAO,EAAE,WAAW,IAAI,KAAK,CAAC;IAClD,IAAI,CAAC,WAAW,IAAI,MAAM,CAAC,GAAG,KAAK,SAAS,EAAE,CAAC;QAC7C,MAAM,CAAC,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC;IAC7C,CAAC;IACD,IAAI,OAAO,EAAE,SAAS,KAAK,SAAS,EAAE,CAAC;QACrC,IAAI,MAAM,CAAC,GAAG,KAAK,SAAS,EAAE,CAAC;YAC7B,MAAM,IAAI,iBAAiB,CACzB,sEAAsE,CACvE,CAAC;QACJ,CAAC;QACD,MAAM,MAAM,GAAG,oBAAoB,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;QACvD,MAAM,MAAM,GAAG,OAAO,MAAM,CAAC,GAAG,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC;QAC3F,MAAM,CAAC,GAAG,GAAG,MAAM,GAAG,MAAM,CAAC;IAC/B,CAAC;IAED,0EAA0E;IAC1E,2CAA2C;IAC3C,MAAM,MAAM,GAAG,OAAO,EAAE,GAAG,KAAK,SAAS;QACvC,CAAC,CAAC,EAAE,GAAG,EAAE,GAAG,EAAE,KAAK,EAAE;QACrB,CAAC,CAAC,EAAE,GAAG,EAAE,GAAG,EAAE,KAAK,EAAE,GAAG,EAAE,OAAO,CAAC,GAAG,EAAE,CAAC;IAC1C,MAAM,SAAS,GAAG,YAAY,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC;IACvD,MAAM,UAAU,GAAG,YAAY,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC;IACxD,MAAM,YAAY,GAAG,GAAG,SAAS,IAAI,UAAU,EAAE,CAAC;IAClD,MAAM,GAAG,GAAG,GAAG,KAAK,OAAO;QACzB,qEAAqE;QACrE,2EAA2E;QAC3E,CAAC,CAAC,UAAU,CAAC,QAAQ,CAAC;aACjB,MAAM,CAAC,YAAY,CAAC;aACpB,IAAI,CAAC,EAAE,GAAG,EAAE,MAAmB,EAAE,WAAW,EAAE,YAAY,EAAE,CAAC;QAClE,CAAC,CAAC,UAAU,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,MAAyB,CAAC;aACnD,MAAM,CAAC,YAAY,CAAC;aACpB,MAAM,EAAE,CAAC;IAChB,OAAO,GAAG,YAAY,IAAI,YAAY,CAAC,GAAG,CAAC,EAAE,CAAC;AAChD,CAAC;AAED;;;;;;;;;;;GAWG;AACH,MAAM,UAAU,aAAa,CAC3B,KAAa,EACb,YAA0B,EAC1B,OAAuB;IAEvB,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACpD,MAAM,IAAI,iBAAiB,CAAC,sBAAsB,CAAC,CAAC;IACtD,CAAC;IACD,MAAM,IAAI,GAAmC,OAAO,YAAY,KAAK,QAAQ;QAC3E,CAAC,CAAC,CAAC,YAAY,CAAC,MAAM,KAAK,CAAC;YACxB,CAAC,CAAC,CAAC,GAAG,EAAE,GAAG,MAAM,IAAI,iBAAiB,CAAC,yBAAyB,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE;YACvE,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,MAAM,CAAC,IAAI,CAAC,YAAY,EAAE,MAAM,CAAC,EAAE,GAAG,EAAE,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC;QAC/E,CAAC,CAAC,YAAY,CAAC;IACjB,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC;QAAE,MAAM,IAAI,iBAAiB,CAAC,yBAAyB,CAAC,CAAC;IAE9E,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAC/B,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;QAAE,MAAM,IAAI,iBAAiB,CAAC,eAAe,CAAC,CAAC;IACrE,MAAM,CAAC,SAAS,EAAE,UAAU,EAAE,MAAM,CAAC,GAAG,KAAK,CAAC;IAE9C,IAAI,MAAuD,CAAC;IAC5D,IAAI,CAAC;QACH,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,oBAAoB,CAAC,SAAS,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAInE,CAAC;IACJ,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,iBAAiB,CAAC,eAAe,CAAC,CAAC;IAC/C,CAAC;IAED,MAAM,OAAO,GAAG,CAAC,OAAO,EAAE,UAAU,IAAI,CAAC,OAAO,CAAC,CAA0B,CAAC;IAC5E,IAAI,OAAO,MAAM,CAAC,GAAG,KAAK,QAAQ,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC;QACpE,MAAM,IAAI,iBAAiB,CAAC,mBAAmB,CAAC,CAAC;IACnD,CAAC;IACD,IAAI,MAAM,CAAC,GAAG,KAAK,OAAO,IAAI,MAAM,CAAC,GAAG,KAAK,OAAO,IAAI,MAAM,CAAC,GAAG,KAAK,OAAO,EAAE,CAAC;QAC/E,MAAM,IAAI,iBAAiB,CAAC,mBAAmB,CAAC,CAAC;IACnD,CAAC;IACD,MAAM,GAAG,GAAG,MAAM,CAAC,GAAG,CAAC;IAEvB,uDAAuD;IACvD,IAAI,UAA0C,CAAC;IAC/C,IAAI,OAAO,MAAM,CAAC,GAAG,KAAK,QAAQ,EAAE,CAAC;QACnC,MAAM,KAAK,GAAG,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,GAAG,KAAK,MAAM,CAAC,GAAG,CAAC,CAAC;QACvD,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;YAAE,MAAM,IAAI,iBAAiB,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QAChE,UAAU,GAAG,KAAK,CAAC;IACrB,CAAC;SAAM,CAAC;QACN,wEAAwE;QACxE,0DAA0D;QAC1D,UAAU,GAAG,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,IAAI,CAAC,CAAC;QACnD,IAAI,UAAU,CAAC,MAAM,KAAK,CAAC;YAAE,MAAM,IAAI,iBAAiB,CAAC,gBAAgB,CAAC,CAAC;IAC7E,CAAC;IAED,IAAI,GAAW,CAAC;IAChB,IAAI,CAAC;QACH,GAAG,GAAG,oBAAoB,CAAC,MAAM,CAAC,CAAC;IACrC,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,iBAAiB,CAAC,mBAAmB,CAAC,CAAC;IACnD,CAAC;IAED,IAAI,OAAoC,CAAC;IACzC,KAAK,MAAM,SAAS,IAAI,UAAU,EAAE,CAAC;QACnC,qEAAqE;QACrE,wEAAwE;QACxE,yCAAyC;QACzC,IAAI,SAAS,CAAC,GAAG,KAAK,GAAG;YAAE,SAAS;QACpC,IAAI,GAAG,KAAK,OAAO,EAAE,CAAC;YACpB,IAAI,CAAC,SAAS,CAAC,SAAS;gBAAE,SAAS;YACnC,MAAM,EAAE,GAAG,YAAY,CAAC,QAAQ,CAAC;iBAC9B,MAAM,CAAC,GAAG,SAAS,IAAI,UAAU,EAAE,CAAC;iBACpC,MAAM,CAAC,EAAE,GAAG,EAAE,SAAS,CAAC,SAAS,EAAE,WAAW,EAAE,YAAY,EAAE,EAAE,GAAG,CAAC,CAAC;YACxE,IAAI,EAAE,EAAE,CAAC;gBACP,OAAO,GAAG,SAAS,CAAC;gBACpB,MAAM;YACR,CAAC;YACD,SAAS;QACX,CAAC;QACD,MAAM,QAAQ,GAAG,UAAU,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,SAAS,CAAC,GAAG,CAAC;aACxD,MAAM,CAAC,GAAG,SAAS,IAAI,UAAU,EAAE,CAAC;aACpC,MAAM,EAAE,CAAC;QACZ,IAAI,GAAG,CAAC,MAAM,KAAK,QAAQ,CAAC,MAAM,IAAI,eAAe,CAAC,GAAG,EAAE,QAAQ,CAAC,EAAE,CAAC;YACrE,OAAO,GAAG,SAAS,CAAC;YACpB,MAAM;QACR,CAAC;IACH,CAAC;IACD,IAAI,CAAC,OAAO;QAAE,MAAM,IAAI,iBAAiB,CAAC,mBAAmB,CAAC,CAAC;IAE/D,IAAI,OAAmB,CAAC;IACxB,IAAI,CAAC;QACH,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,oBAAoB,CAAC,UAAU,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAe,CAAC;IACxF,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,iBAAiB,CAAC,eAAe,CAAC,CAAC;IAC/C,CAAC;IACD,IAAI,OAAO,KAAK,IAAI,IAAI,OAAO,OAAO,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC;QAC9E,MAAM,IAAI,iBAAiB,CAAC,eAAe,CAAC,CAAC;IAC/C,CAAC;IAED,MAAM,cAAc,GAAG,OAAO,EAAE,cAAc,IAAI,CAAC,CAAC;IACpD,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC;IAC1C,IAAI,OAAO,OAAO,CAAC,GAAG,KAAK,QAAQ,IAAI,OAAO,CAAC,GAAG,GAAG,cAAc,GAAG,GAAG,EAAE,CAAC;QAC1E,MAAM,IAAI,iBAAiB,CAAC,aAAa,EAAE,IAAI,IAAI,CAAC,OAAO,CAAC,GAAG,GAAG,IAAI,CAAC,CAAC,CAAC;IAC3E,CAAC;IACD,IAAI,OAAO,OAAO,CAAC,GAAG,KAAK,QAAQ,IAAI,OAAO,CAAC,GAAG,GAAG,cAAc,GAAG,GAAG,EAAE,CAAC;QAC1E,MAAM,IAAI,cAAc,CAAC,gBAAgB,EAAE,IAAI,IAAI,CAAC,OAAO,CAAC,GAAG,GAAG,IAAI,CAAC,CAAC,CAAC;IAC3E,CAAC;IACD,IAAI,OAAO,EAAE,MAAM,KAAK,SAAS,IAAI,OAAO,CAAC,GAAG,KAAK,OAAO,CAAC,MAAM,EAAE,CAAC;QACpE,MAAM,IAAI,iBAAiB,CAAC,iCAAiC,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC;IACjF,CAAC;IACD,IAAI,OAAO,EAAE,QAAQ,KAAK,SAAS,EAAE,CAAC;QACpC,MAAM,OAAO,GAAG,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;QACxF,MAAM,OAAO,GAAG,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC;YACxC,CAAC,CAAC,OAAO,CAAC,GAAG;YACb,CAAC,CAAC,OAAO,CAAC,GAAG,KAAK,SAAS;gBACzB,CAAC,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC;gBACf,CAAC,CAAC,EAAE,CAAC;QACT,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;YAC9C,MAAM,IAAI,iBAAiB,CAAC,sBAAsB,CAAC,CAAC;QACtD,CAAC;IACH,CAAC;IAED,OAAO,EAAE,OAAO,EAAE,OAAY,EAAE,GAAG,EAAE,OAAO,CAAC,GAAG,EAAE,CAAC;AACrD,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,MAAM,CACpB,KAAa,EACb,YAA0B,EAC1B,OAAuB;IAEvB,OAAO,aAAa,CAAI,KAAK,EAAE,YAAY,EAAE,OAAO,CAAC,CAAC,OAAO,CAAC;AAChE,CAAC;AAED,MAAM,UAAU,MAAM,CAAiB,KAAa;IAClD,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,IAAI,CAAC;IAC3C,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAC/B,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IACpC,IAAI,CAAC;QACH,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,oBAAoB,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAY,CAAC;QACvF,IAAI,OAAO,KAAK,IAAI,IAAI,OAAO,OAAO,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC;YAAE,OAAO,IAAI,CAAC;QAC3F,OAAO,OAAY,CAAC;IACtB,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED,MAAM,GAAG,GAAG,EAAE,IAAI,EAAE,MAAM,EAAE,aAAa,EAAE,MAAM,EAAE,CAAC;AACpD,eAAe,GAAG,CAAC"}

package/dist/lib/project-jwt-keys.d.ts

@@ -0,0 +1,73 @@
+/**
+ * The project-JWT verification keyset, fetched from the gateway at cold start.
+ *
+ * WHY THIS EXISTS. Until now the runtime read `RUN402_JWT_SECRET` — the
+ * PLATFORM signing key — straight out of the Lambda environment. That key is
+ * symmetric, so verification material IS signing material: every one of the
+ * fleet's tenant Lambdas held the ability to forge `anon_key`/`service_key`
+ * for EVERY project on the platform, and those carry no expiry. It also made
+ * rotation impossible, because the key arrived at deploy time and could only
+ * change by redeploying someone else's code.
+ *
+ * Fetching a PUBLIC keyset instead fixes both at once: there is nothing here
+ * that can sign, and a rotated key reaches the fleet at the next cold start
+ * with no redeployment at all.
+ *
+ * Deliberately mirrors `lib/actor-context-verify.ts`, which established this
+ * pattern for the actor-context key — same lazy single-flight fetch, same
+ * service-key auth, same "failures are non-fatal, the next request retries".
+ *
+ * TRANSITION FALLBACK. While `RUN402_JWT_SECRET` is still injected, it is kept
+ * as a SECOND verification key, tried after the fetched keyset. This is
+ * temporary scaffolding with a defined removal point, and it is load-bearing
+ * for exactly one window: after the fleet carries this runtime but BEFORE the
+ * gateway's signing key becomes asymmetric, the gateway is still minting HS256
+ * tokens that the (asymmetric-only) fetched keyset cannot verify. Removing the
+ * fallback before then would break `getUser()` on every project at once.
+ * See `openspec/changes/functions-runtime-key-decoupling/design.md`.
+ */
+import type { VerificationKey } from "./jwt.js";
+/**
+ * The keys `getUser()` should verify against, most-trusted first.
+ *
+ * Returns the fetched public keyset followed by the env-injected legacy key
+ * when one is present. Order matters only for which key is TRIED first — a
+ * token verifies against exactly one key either way, since `verifyWithKey`
+ * selects on `kid` and refuses to fall back on a signature mismatch.
+ */
+export declare function projectJwtVerificationKeys(): VerificationKey[];
+/**
+ * Ensure the keyset is loaded before a synchronous verify.
+ *
+ * Single-flight: concurrent invocations in the same execution environment
+ * share one fetch. Cached for the life of the environment, so a warm Lambda
+ * pays nothing. Never throws — a failed fetch leaves whatever keys are
+ * available (possibly just the env fallback) and the next request retries.
+ */
+export declare function ensureProjectJwtKeysLoaded(): Promise<void>;
+/** True when verification has no key at all — the caller must fail CLOSED
+ *  rather than treat the request as anonymous-but-fine. */
+export declare function projectJwtKeysUnavailable(): boolean;
+/** Test injection. NEVER call from production code. */
+export declare function _setProjectJwtKeysForTest(keys: VerificationKey[] | null): void;
+/**
+ * The header carrying the gateway-minted actor token.
+ *
+ * The runtime FORWARDS this rather than minting its own. Kept here beside the
+ * keyset because the two are halves of one contract: the gateway signs both
+ * the tokens this runtime verifies and the one it forwards, and the runtime
+ * holds nothing that can produce either.
+ */
+export declare const DATA_PLANE_ACTOR_TOKEN_HEADER = "x-run402-actor-token";
+/** Read a header from either shape, case-insensitively. */
+export declare function readHeader(headers: unknown, name: string): string | undefined;
+/**
+ * The gateway-minted actor bearer for this request, if present.
+ *
+ * Returns the `Authorization`-ready value. Absent for anonymous requests, and
+ * absent on older gateways — callers must fall through to their previous
+ * behaviour rather than failing, so a new runtime on an old gateway degrades
+ * instead of breaking.
+ */
+export declare function forwardedActorAuthorization(headers: unknown): string | undefined;
+//# sourceMappingURL=project-jwt-keys.d.ts.map

package/dist/lib/project-jwt-keys.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"project-jwt-keys.d.ts","sourceRoot":"","sources":["../../src/lib/project-jwt-keys.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;GA2BG;AAGH,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,UAAU,CAAC;AAchD;;;;;;;GAOG;AACH,wBAAgB,0BAA0B,IAAI,eAAe,EAAE,CAK9D;AAeD;;;;;;;GAOG;AACH,wBAAsB,0BAA0B,IAAI,OAAO,CAAC,IAAI,CAAC,CAehE;AAED;2DAC2D;AAC3D,wBAAgB,yBAAyB,IAAI,OAAO,CAEnD;AAsCD,uDAAuD;AACvD,wBAAgB,yBAAyB,CAAC,IAAI,EAAE,eAAe,EAAE,GAAG,IAAI,GAAG,IAAI,CAG9E;AAED;;;;;;;GAOG;AACH,eAAO,MAAM,6BAA6B,yBAAyB,CAAC;AAQpE,2DAA2D;AAC3D,wBAAgB,UAAU,CAAC,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS,CAS7E;AAED;;;;;;;GAOG;AACH,wBAAgB,2BAA2B,CAAC,OAAO,EAAE,OAAO,GAAG,MAAM,GAAG,SAAS,CAGhF"}